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III. DETAILED ACTION 

1. Claims 1-55 are presented for examination. 

Examiner's Remarks 

2. In response to Applicants Amendments and remarks, Claim Rejections under 35 USC § 
101, 1 12 and objection to the specification , abstract and drawings are hereby withdrawn. 

Applicant argues: 

"Tamir does not appear to disclose or suggest the collection of context data". 
Examiner disagree. Examiner believe application specific records and application 
configuration information reads on context data., (col. 2, lines 40-50). 

Claim Rejections - 35 USC S 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 
102 of this title, if the differences between the subject matter sought to be patented and the prior art are such that 
the subject matter as a whole would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which the subject matter pertains. Patentability shall not be negatived by the manner in 
which the invention was made. 

4. Claims 1-4, 6-7, 9-18, 22-25, 27-28, 30-40, 44-49, 51 and 53-55 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Tamir et al. (U.S. Patent 6,957,390) in view of 
Kennedy et al. (U.S. Patent 6,651,217). 

As to Claims 1, 22 and 44, Tamir et al. discloses a method of managing meta data in a 
computing device, the method comprising the steps of: 
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collecting (i.e. collection of data. Col. 6, lines 52-55) meta data (i.e. tracking records such 
as session records 34, application records, and activity records. Col. 6, lines 52-55) resulting 
from use of the computing device (i.e. user client applications 2 exchange messages with 
communication servers. Col. 6, lines 52-55), the metadata comprising application data usable in 
an application (i.e. Typical tracking records such as session records 34, application records, and 
activity records. Col. 6, lines 52-55) and a context data (col. 2, lines 40-50) for identifying 
context in which the application data are used (i.e. Examples of data recorded in the Activity 
Data 60 include web site addresses, text entries, Internet Service Providers (ISP), new menu 
items, and existing menu items, i.e. col. 7, lines 35-38 and Col. 6, lines 52-55). 

determining statistical information (i.e. generating statistics. Col. 13, lines 37-39) 
associated with the meta data (i.e. statistics based on the application, activity, date, or a 
combination of these fields, and creating instructions based on these statistics. Col. 13, lines 37- 
39), the statistical information indicating relationships between the meta data (i.e. generating 
statistics based on the application, activity, date, or a combination of these fields, and creating 
instructions based on these statistics. Col. 13, lines 36-39). 

storing the meta data and the statistical information in a storage of the computing device 
(i.e. All this information is stored in the server system's database and log files. Col. 17, lines 30- 
36); and 

retrieving, from the storage, (i.e. used by the server system. Col. 17, lines 30-36) 
application data (i.e. application. Col. 13, lines 45-67) for a current context of using the 
application (Col. 13, lines 45-67) based on the context data (col. 7, lines 35-38) and the statistical 
information (By recording numerous records for different dates, applications, and activities, the 
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system is able to perform functions including tracking all application activities, generating 
statistics based on the application, activity, date, or a combination of these fields, and creating 
instructions based on these statistics. Col. 13, lines 35-39); 

Tamir et al. does not explicitly teach most appropriate. 

Kennedy et al. teaches most appropriate (i.e. best match, col. 7, lines 28-50). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al. with most appropriate. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. by the teaching of Kennedy et al. to include 
most appropriate with the motivation to provide for an improved ability to share or suggest 
previously entered data values as taught by Kennedy et al. col. 2, lines 58-63). 

As to Claims 2 and 23, Tamir et al. as modified teaches a method further comprising the 

step of: 

applying the retrieved application data in the current context (i.e. current session based on 
their most recent activity. Tamir et al. col. 3, lines 9-21). 

As to Claims 3, 24 and 48, Tamir et al. as modified teaches a method wherein 
the context data identify at least one of the following: user roles, uniform resource 

identifiers (URls), file names, and/or form names pertaining to the application data (i.e. web site 

address. Tamir et al. col. 7, lines 35-39). 



Application/Control Number: 10/051,558 Page 5 

Art Unit: 2165 

As to Claims 4, 25 and 5 1, Tamir et al. as modified teaches a method wherein the 
application data comprise at least one of the following: 

page display setting data, file display setting data, user ID/password combinations, user's 
preference data, bookmarks, and authentication data (i.e. Browser Width field 162 and a Browser 
Height field 164, which define the width and height, respectively, of the browser window that 
displays the messages. Tamir et al. col. 13, lines 64-67). 

As to Claims 6, 27 and 49, Tamir et al. as modified teaches a method wherein the 
authentication data include at least one of the following: 

wherein the metadata are stored in (key, value) pairs ( Tamir et al. col. 6, lines 53-54). 

As to Claims 7 and 28, Tamir et al. as modified teaches a method wherein 
the statistical information indicates frequencies (i.e. application activities, generating 
statistics based on the application, activity, date, or a combination of these fields, and creating 
instructions based on these statistics. Tamir et al. Col. 13, lines 36-39) in which particular 
application data are used together in particular contexts (i.e. how the user prefers to view each 
web site based on their prior activity, their preferences, the web site, and various other factors. 
Tamir et al. col. 1, line 67- col. 2, line 2). 



As to Claims 9, 31 and 53, Tamir et al. as modified teaches a method wherein the current 
context comprises at least one of the following: 
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opening a web page, filling in a computer form, filling in a password changing form, 
providing a certificate, opening a computer file, or processing a computer file, or executing an 
application program (The user can open multiple web display applications at once. Tamir et al. 
col. 2, lines 64-65). 

As to Claims 10, 32 and 54, Tamir et al. as modified 

does not explicitly teach providing a graphical user interface (GUI) for allowing the user 
to organize the stored meta data. 

Kennedy et al. teaches providing a graphical user interface (GUI) for allowing the user to 
organize the stored meta data (Kennedy et al. Fig. 6-7 and col. 8, lines 36-45 and col. 14, lines 
52-55). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al with providing a graphical user 
interface (GUI) for allowing the user to organize the stored meta data. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. by the teaching of Kennedy et al. with the 
motivation to provide for providing a graphical user interface (GUI) for allowing the user to 
organize the stored meta data to allow for an improved ability to share or suggest previously 
entered data values as taught by Kennedy et al. col. 2, lines 58-63). 



As to Claims 1 1, 33 and 55, Tamir et al. as modified 
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does not explicitly teach the GUI displays a graphical tool in a cylindrical configuration 
for organizing the stored meta data. 

Kennedy et al. teaches the GUI displays a graphical tool in a cylindrical configuration for 
organizing the stored meta data (Kennedy et al. Fig. 6). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al. with the GUI displays a graphical tool 
in a cylindrical configuration for organizing the stored meta data. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. by the teaching of Kennedy et al. to include 
providing the GUI displays a graphical tool in a cylindrical configuration for organizing the 
stored meta data to allow for an improved ability to share or suggest previously entered data 
values with the motivation to provide for an improved ability to share or suggest previously 
entered data values as taught by Kennedy et al. col. 2, lines 58-63). 

As to Claims 12 and 34, Tamir et al. as modified does not explicitly teach is performed 
using heuristics algorithms. 

Kennedy et al. teaches is performed using heuristics algorithms (i.e. a heuristics function 
can also be provided)( Kennedy et al. col. 7, lines 29-35). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al. with is performed using heuristics 
algorithms. 
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It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. by the teaching of Kennedy et al. to include is 
performed using heuristics algorithms with the motivation to provide for an improved ability to 
share or suggest previously entered data values as taught by Kennedy et al. col. 2, lines 58-63). 

As to Claims 13, 35 and 46, Tamir et al. as modified teaches a method wherein retrieving, 
from the storage, application data that would be most appropriate for a current context of using 
the application based on the context data and the statistical information of: 

formulating search requirements (i.e. query. Tamir et al. col. 4, lines 56-64) based on the 
current context of using the application ( Tamir et al. col. 4, lines 56-64); and 

executing a search based on the search requirements (Tamir et al. col. 4, lines 56-64). 

As to Claims 14, 36 and 47, Tamir et al. as modified teaches a method wherein the search 
requirements specify weighted properties of the current context of using the application (i.e. 
weighted information about the user's behavior. Tamir et al. Col. 11, lines 9-20). 

As to Claims 15 and 37, Tamir et al. as modified teaches a method further comprising: 
applying the retrieved application data in the current context (Tamir et al. Col. 13, lines 

45-67 and col. 7, lines 35-38); and 

applying predetermined application data (i.e. default settings. Tamir et al. Col. 5, lines 

40-42) in the current context if no such most appropriate application data are retrieved in the 

retrieving step (Tamir et al. Col. 5, lines 40-42). 
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As to Claims 16 and 38, Tamir et al. as modified 
does not explicitly teach automatically filling in the computer form with the most appropriate 
application data. 

Kennedy et al. teaches automatically filling in the computer form with the most 
appropriate (col. 7, lines 28-50) application data (i.e. automatically populating a form, such as a 
plurality of fields) ( Kennedy et al. Fig. 6-7 and col. 14, lines 52-55). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al. with automatically filling in the 
computer form with the most appropriate application data. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. by the teaching of Kennedy et al. 
to include automatically filling in the computer form with the most appropriate application data 
with the motivation to provide for an improved ability to share or suggest previously entered data 
values as taught by Kennedy et al. col. 2, lines 58-63). 

As to Claims 17 and 39, Tamir et al. as modified teaches retrieving, from the storage, 
application data that are related to the current context (Tamir et al. Col. 17, lines 30-36 and Col. 
13, lines 45-67). 

Tamir et al. as modified does not explicitly teach alternative application data that are 
related to the current context of filling in the computer form; and 
presenting the alternative application data to a user for the user's consideration. 
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Kennedy et al. teaches alternative application data that are related to the current context 
of filling in the computer form (i.e. the user has the option of entering information for other 
fields for which no match was found¥ Kennedv et al. Fig. 6-7 and col. 8, lines 34-45); and 

presenting the alternative application data to a user for the user's consideration (Kennedy 
et al. Fig. 6 and col. 8, lines 34-45). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al. with alternative application data that 
are related to the current context of filling in the computer form; and presenting the alternative 
application data to a user for the user's consideration. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. by the teaching of Kennedy et al. 
to include alternative application data that are related to the current context of filling in the 
computer form; and presenting the alternative application data to a user for the user's 
consideration with the motivation to provide for an improved ability to share or suggest 
previously entered data values as taught by Kennedy et al. col. 2, lines 58-63). 

As to Claims 18 and 40, Tamir et al. as modified does not explicitly teach the computer 
form is a password-changing form and the retrieved application data comprise a user 
identification and a password. 

Kennedy et al. teaches the computer form is a password-changing form (i.e. password. 
Kennedy et al. Fig. 6 and col. 8, lines 34-45), and the retrieved application data comprise a user 
identification and a password (Kennedy et al. Fig. 6 and col. 8, lines 34-45); 
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Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et ah with computer form is a password- 
changing form and the retrieved application data comprise a user identification and a password. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. by the teaching of Kennedy et al. to include 
computer form is a password-changing form and the retrieved application data comprises a user 
identification and a password with the motivation to provide for an improved ability to share or 
suggest previously entered data values as taught by Kennedy et al. col. 2, lines 58-63). 

As to Claim 30, Tamir et al. as modified teaches a 
computer program product further comprising for 

computer readable program code configured to update the computing device with meta data 
resulting from use of the computing device in the current context (Tamir et al. col. 7, lines 35-38 
and Col. 6, lines 52-55 and Col. 13, lines 45-67). 

As to Claim 45, Tamir et al. as modified teaches a 
system wherein the data repository module comprises: 

the storage for storing the meta data ( Tamir et al. Col. 17, lines 30-36); 

a first interface for managing a process of storing the meta data in the storage (Tamir et 
al Col. 17, lines 30-36); and 

a second interface for retrieving from the storage the most appropriate meta data for the 
current context. Tamir et al. Col. 13, lines 45-67). 
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5. Claims 5, 8, 19-21, 26, 29, 41-43, 50 and 52, are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Tamir et al. (U.S. Patent 6,957,390) and Kennedy et al. (U.S. Patent 
6,651,217) in further view of Olden (U.S. Patent 6,460,141). 

The teachings of Tamiretal. and Kennedy et al. have been discussed above. 

As to Claims 5, 26 and 52, Tamir et al. and Kennedy et al. as modified does not explicitly 
teach certificates, or public keys. 

Olden teaches certificates, or public keys (i.e. public key encryption. Col. 24, lines 16- 

19). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al and Kennedy et al. with certificates, 
or public keys. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. and Kennedy et al. by the teaching of Olden to 
include certificates, or public keys with the motivation to provide for an improved security and 
access control system as taught by Olden (col. 2, lines 8-12). 

As to Claims 8, 29 and 50, Tamir et al. and Kennedy et al. teaches a method wherein the 
computing device implements retrieving, from the storage, ( Tamir et al. Col. 17, lines 30-36) 
application data for a current context of using the application based on the context data (Tamir et 
al Col. 17, lines 30-36 and Col. 13, lines 45-67) and the statistical information (i.e. generating 
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statistics. Tamir et al. Col. 13, lines 37-39) is performed by a add-on module (i.e. external plug- 
ins. Tamir et al. Col. 15, line 51); 

Tamir et al. does not explicitly teach most appropriate. 

Kennedy et al. teaches most appropriate (i.e. best match, col. 7, lines 28-50). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al. with most appropriate. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. by the teaching of Kennedy et al. to 
include most appropriate with the motivation to provide for an improved ability to share or 
suggest previously entered data values as taught by Kennedy et al. col. 2, lines 58-63). 

Tamir et al. and Kennedy et al. as modified does not explicitly teach a Common Data 
Security Architecture (CDSA). 

Olden teaches a Common Data Security Architecture (CDSA) (i.e. CDSA. Olden col. 32, 
lines 23-25). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al. and Kennedy et al. as modified with a 
Common Data Security Architecture (CDSA). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. and Kennedy et al as modified by the teaching 
of Olden to include a Common Data Security Architecture (CDSA) with the motivation to 
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provide for to an improved security and access control system as taught by Olden (col. 2, lines 8- 
12). 

As to Claims 19 and 41, Tamir et al. and Kennedy et al. as modified does not explicitly 
teach presenting the actual password in a non-obfuscated format when it is determined to be safe 
to present the actual password; determining whether it is safe to present the actual password to a 
user; and presenting the actual password in a non-obfuscated format when it is determined to be 
safe to present the actual password. 

Olden teaches presenting the actual password in a non-obfuscated format when it is 
determined to be safe to present the actual password (Olden Fig. 9 and 12 and col. 14, lines 22- 
28); 

determining whether it is safe to present the actual password to a user (Olden Fig. 9 and 
12 and col. 14, lines 22-28); and 

presenting the actual password in a non-obfuscated format when it is determined to be 
safe to present the actual password.(01den Fig. 9 and 12 and col. 14, lines 22-28). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al. and Kennedy et al. as modified with 
presenting the actual password in a non-obfuscated format when it is determined to be safe to 
present the actual password; determining whether it is safe to present the actual password to a 
user; and presenting the actual password in a non-obfuscated format when it is determined to be 
safe to present the actual password. 
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It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. and Kennedy et al. as modified to include 
presenting the actual password in a non-obfuscated format when it is determined to be safe to 
present the actual password; determining whether it is safe to present the actual password to a 
user; and presenting the actual password in a non-obfuscated format when it is determined to be 
safe to present the actual password with the motivation to provide for to an improved security 
and access control system as taught by Olden (col. 2, lines 8-12). 

As to Claims 20 and 42, Tamir et al. and Kennedy et al. and Olden as modified does not 
explicitly teach determining whether it is safe to present the actual password to a user is 
performed based on input from the user. 

Olden teaches determining whether it is safe to present the actual password to a user is 
performed based on input from the user ( Olden Fig. 9 and 12 and col. 14, lines 22-28). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al. and Kennedy et al. and Olden as 
modified with determining whether it is safe to present the actual password to a user is 
performed based on input from the user. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. and Kennedy et al. and Olden as modified by 
the teaching of Olden to include determining whether it is safe to present the actual password to 
a user is performed based on input from the user with the motivation to provide for to an 
improved security and access control system as taught by Olden (col. 2, lines 8-12). 
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As to Claims 21 and 43, Tamir et al. and Kennedy et al. and Olden as modified does not 
explicitly teach replacing the password stored in the storage with a new password if the new 
password has been accepted by a receiving party. 

Olden teaches replacing the password stored in the storage with a new password if the 
new password has been accepted by a receiving party ( Olden Fig. 9 and 12 and col. 14, lines 22- 
28). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Tamir et al. and Kennedy et al. and Olden as 
modified with replacing the password stored in the storage with a new password if the new 
password has been accepted by a receiving party ( Olden Fig. 9 and 12 and col. 14, lines 22-28). 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Tamir et al. and Kennedy et al. and Olden as modified by 
the teaching of Olden to include replacing the password stored in the storage with a new 
password if the new password has been accepted by a receiving party with the motivation to 
provide for to an improved security and access control system as taught by Olden (col. 2, lines 8- 
12). 
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Conclusion 

6. THIS ACTION IS MADE FINAL, Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory- period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 CFR 
1.136 (a) will be calculated from the mailing date of the advisory action. In no event, however, 
will the statutory period for reply-expire later than SIX MONTHS from the mailing date of this 
final action. 
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Point of Contact 



7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Yicun Wu whose telephone number is 571-272-4087. The 
examiner can normally be reached on 8:00 am to 4:30 pm, Monday -Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jeffrey Gaffin can be reached on 571-272-4146. The fax phone numbers for the 
organization where this application or proceeding is assigned are 571-273-8300. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is 571-272-2100. 



Yicun Wu 
Patent Examiner 
Technology Center 2100 




July 20, 2006 



